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MEMORY 3610B 






THE CRYPTO-PROCESSOR MAPS THE MEMORY LOCATION IN THE 
TRANSACTION REQUEST ACCORDING TO THE ADDRESS MAPPING OF THE 
MEMORY 361 5B 






THE CRYPTO-PROCESSOR PROVIDES 
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THE TRANSACTION REQUEST TO THE 
1 3620B 



THE MEMORY PERFORMS THE REQUESTED TRANSACTION 3625B 
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THE SECURITY DEVICE DETERMINES IF A LOCK IS IN PLACE FOR THE 
STORAGE LOCATION 3705 




THE SECURITY DEVICE PROVIDES A CHALLENGE IN RESPONSE TO THE 
TRANSACTION REQUEST FOR THE STORAGE LOCATION ASSOCIATED WITH 
A STORAGE DEVICE CONNECTED TO THE SECURITY DEVICE 3715 



THE SECURITY DEVICE RECEIVES A RESPONSE TO THE CHALLENGE 3720 



THE SECURITY DEVICE EVALUATES THE RESPONSE BY COMPARING THE 
RESPONSE TO AN EXPECTED RESPONSE 3725 




THE SECURITY DEVICE PROVIDES THE TRANSACTION REQUEST TO THE 
STORAGE DEVICE 3735 
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STORE DATA IN THE STORAGE DEVICE 3810 
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USE THE CODE TO SUBMIT THE SECRET (OR THE INDICATION) 
TO THE STORAGE DEVICE 3855 
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A REQUESTOR MAKES AN ACCESS REQUEST 3905 



A GATEKEEPER RECEIVES THE ACCESS REQUEST AND PROVIDES A 
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AUTHORITY TO MAKE THE ACCESS REQUEST 3910 
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TO THE CHALLENGE TO AUTHENTICATE THE REQUESTOR'S AUTHORITY TO 
MAKE THE ACCESS REQUEST 3915 



THE GATEKEEPER RECEIVES THE RESPONSE TO THE CHALLENGE AND 
COMPARES THE RESPONSE TO AN EXPECTED RESPONSE 3920 
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A BIOMETRIC DATA TRANSACTION IS REQUESTED INVOLVING A BIOMETRIC 
DEVICE 4110 



A NONCE OR RANDOM NUMBER IS PROVIDED TO THE BIOMETRIC DEVICE 
4115 



THE BIOMETRIC DEVICE RESPONDS TO THE DATA TRANSACTION REQUEST 
WITH THE REQUESTED BIOMETRIC DATA AND THE RESULT OF A HASH 
USING A SECRET AND THE NONCE OR RANDOM NUMBER 4120A 



THE RESULT OF THE HASH USING THE SECRET AND THE NONCE OR 
RANDOM NUMBER IS COMPARED TO AN EXPECTED VALUE FOR THE 
RESULT OF THE HASH 4125A 
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REJECT THE TRANSMITTED 
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ACCEPT THE TRANSMITTED 

BIOMETRIC DATA AS THE 
REQUESTED BIOMETRIC DATA 
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A B10METRIC DATA TRANSACTION IS REQUESTED INVOLVING A BIOMETRIC 
DEVICE 4110 
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ROVIDED TO THE BIOMETRIC DEVICE 
15 



THE BIOMETRIC DEVICE RESPONDS TO THE DATA TRANSACTION REQUEST 
WITH THE REQUESTED BIOMETRIC DATA IN ENCRYPTED FORM AND THE 
RESULT OF A HASH USING A SECRET AND THE NONCE OR RANDOM 
NUMBER 4120B 



THE RESULT OF THE HASH USING THE SECRET AND THE NONCE OR 
RANDOM NUMBER IS COMPARED TO AN EXPECTED VALUE FOR THE 
RESULT OF THE HASH 4125B 
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A MASTER DEVICE IN THE COMPUTER SYSTEM ESTABLISHES A SECRET 
WITH A DEVICE IN THE COMPUTER SYSTEM DURING A TRUSTED SET-UP 
4205 



A DATA TRANSACTION IS REQUESTED INVOLVING THE DEVICE IN THE 
COMPUTER SYSTEM THAT KNOWS THE SECRET 4210 



A NONCE OR RANDOM NUMBER IS PROVIDED TO THE DEVICE IN THE 
COMPUTER SYSTEM THAT KNOWS THE SECRET 4215 



THE DEVICE RESPONDS TO THE DATA TRANSACTION REQUEST WITH 
EITHER THE REQUESTED DATA AND A RESULT OF A HASH USING THE 
SECRET AND THE NONCE OR RANDOM NUMBER OR THE RESULT OF THE 
HASH 4220A 



THE RESULT OF THE HASH USING THE SECRET AND THE NONCE OR 
RANDOM NUMBER IS COMPARED TO AN EXPECTED VALUE FOR THE 
RESULT OF THE HASH 4225 
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4240A 
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A MASTER DEVICE IN THE COMPUTER SYSTEM ESTABLISHES A SECRET 
WITH A DEVICE IN THE COMPUTER SYSTEM DURING A TRUSTED SET-UP 
4205 






A DATA TRANSACTION IS REQUESTED INVOLVING THE DEVICE IN THE 
COMPUTER SYSTEM THAT KNOWS THE SECRET 4210 






A NONCE OR RANDOM NUMBER IS PROVIDED TO THE DEVICE IN THE 
COMPUTER SYSTEM THAT KNOWS THE SECRET 4215 







THE DEVICE RESPONDS TO THE DATA TRANSACTION REQUEST BY EITHER 
ENCRYPTING THE REQUESTED DATA USING THE SECRET AND THE NONCE 
OR RANDOM NUMBER AND TRANSMITTING THE ENCRYPTED DATA AND A 
RESULT OF A HASH USING THE SECRET AND THE NONCE OR RANDOM 
NUMBER OR TRANSMITTING THE RESULT OF THE HASH 4220B 



THE RESULT OF THE HASH USING THE SECRET AND THE NONCE OR 
RANDOM NUMBER IS COMPARED TO AN EXPECTED VALUE FOR THE 
RESULT OF THE HASH 4225 
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A MASTER DEVICE IN THE COMPUTER SYSTEM READS THE GUID FOR A 
DEVICE IN THE COMPUTER SYSTEM AND RECORDS THE GUID IN A GUID 
TABLE DURING A TRUSTED SET-UP 4305 



A DATA TRANSACTION IS REQUESTED INVOLVING THE DEVICE IN THE 
COMPUTER SYSTEM WITH THE KNOWN GUID 4310 



A NONCE OR RANDOM NUMBER IS PROVIDED TO THE DEVICE IN THE 
COMPUTER SYSTEM WITH THE KNOWN GUID 4315 



THE DEVICE RESPONDS TO THE DATA TRANSACTION REQUEST WITH THE 
REQUESTED DATA AND A RESULT OF A HASH USING THE GUID AND THE 
NONCE OR RANDOM NUMBER OR THE RESULT OF THE HASH 4320A 



THE RESULT OF THE HASH USING THE GUID AND THE NONCE OR RANDOM 
NUMBER IS COMPARED TO AN EXPECTED VALUE FOR THE RESULT OF THE 
HASH 4325 




REJECT THE TRANSMITTED 
DATA OR DO NOT SENT THE 
DATA 4335 



ACCEPT THE TRANSMITTED 
DATA AS THE REQUESETED 
DATA OR SEND THE DATA 
4340A 
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A MASTER DEVICE IN THE COMPUTER SYSTEM READS THE GUID FOR A 
DEVICE IN THE COMPUTER SYSTEM AND RECORDS THE GUID IN A GUID 
TABLE DURING A TRUSTED SET-UP 4305 



A DATA TRANSACTION IS REQUESTED INVOLVING THE DEVICE IN THE 
COMPUTER SYSTEM WITH THE KNOWN GUID 4310 



A NONCE OR RANDOM NUMBER IS PROVIDED TO THE DEVICE IN THE 
COMPUTER SYSTEM WITH THE KNOWN GUID 4315 



THE DEVICE RESPONDS TO THE DATA TRANSACTION REQUEST BY 
ENCRYPTING THE REQUESTED DATA USING THE GUID AND THE NONCE OR 
RANDOM NUMBER AND TRANSMITTING THE ENCRYPTED DATA AND A 
RESULT OF A HASH USING THE GUID AND THE NONCE OR RANDOM 
NUMBER OR TRANSMITTING THE RESULT OF THE HASH 4320B 



THE RESULT OF THE HASH USING THE GUID AND THE NONCE OR RANDOM 
NUMBER IS COMPARED TO AN EXPECTED VALUE FOR THE RESULT OF 
THE HASH 4325 
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A MASTER DEVICE IN THE COMPUTER SYSTEM READS THE GUID FOR A 
DEVICE IN THE COMPUTER SYSTEM, RECORDS THE GUID IN A GUID TABLE, 
AND TRANSMITS A SECRET TO THE DEVICE DURING A TRUSTED SET-UP 
4^ 
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A DATA TRANSACTION IS REQUESTED INVOLVING THE DEVICE IN THE 
COMPUTER SYSTEM WITH THE KNOWN GUID THAT KNOWS THE SECRET 
4311 

1 

A NONCE OR RANDOM NUMBER IS PROVIDED TO THE DEVICE IN THE 
COMPUTER SYSTEM WITH THE KNOWN GUID THAT KNOWS THE SECRET 
4316 



THE DEVICE RESPONDS TO THE DATA TRANSACTION REQUEST BY 
ENCRYPTING THE REQUESTED DATA USING THE SECRET, THE GUID, AND 
THE NONCE OR RANDOM NUMBER AND TRANSMITTING THE 
ENCRYPTED DATA AND A RESULT OF A HASH USING THE SECRET, THE 
GUID, AND THE NONCE OR RANDOM NUMBER OR TRANSMITTING THE 
RESULT OF THE HASH 4320C 



THE RESULT OF THE HASH USING THE SECRET, THE GUID, AND THE NONCE 
OR RANDOM NUMBER IS COMPARED TO AN EXPECTED VALUE FOR THE 
RESULT OF THE HASH 4326 
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A MASTER DEVICE IN THE COMPUTER SYSTEM READS THE GUID FOR A 
DEVICE IN THE COMPUTER SYSTEM AND RECORDS THE GUID IN A GUID 

TABLE DURING A TRUST ED SET-UP 4405 
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THE DEVICE MAY RECEIVE A SYSTEM GUID FROM THE MASTER DEVICE AND 
STORE THE SYSTEM GUID 4410 



THE DEVICE SETS A INTRODUCED BIT IN RESPONSE TO JOINING THE 
COMPUTER SYSTEM 4415 



THE DEVICE RECEIVES A TRANSACTION REQUEST FROM THE COMPUTER 
SYSTEM AND THE DEVICE CHECKS IF ITS INTRODUCED BIT IS SET _4420 




THE DEVICE DOES NOT 
FULFILL THE TRANSACTION 
REQUEST OR DO NOT 
RESPOND TO THE 
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THE DEVICE MAY REQUEST 
AUTHENTICATION FROM THE 
COMPUTER SYSTEM USING A SECRET 
(e.g. THE GUID AND/OR THE SYSTEM 
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TRANSACTION REQUEST 4435 



THE DEVICE FULFILLS THE 
TRANSACTION REQUEST 4445 
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THE DEVICE OR THE MASTER DEVICE INITIATES A REQUEST FOR THE 
DEVICE TO LEAVE THE COMPUTER SYSTEM 4505 
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THE DEVICE AND THE MASTER DEVICE AUTHENTICATE EACH OTHER USING 
THE GUID AND/OR THE SYSTEM GUID IN RESPONSE TO THE REQUEST FOR 
THE DEVICE TO LEAVE THE COMPUTER SYSTEM 4510 
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THE DEVICE RESETS THE INTRODUCED BIT IN RESPONSE TO THE DEVICE 
AND THE MASTER DEVICE SUCCESSFULLY AUTHENTICATING EACH OTHER 
4515 
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AUTHENTICATES 4610 
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THE DEVICE RESETS THE INTRODUCED BIT IN RESPONSE TO THE DEVICE 
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TRANSMIT A MASTER MODE SIGNAL TO BUS INTERFACE LOGIC 
CONNECTED BETWEEN MASTER MODE LOGIC AND A DATA INPUT DEVICE, 
WHERE THE BUS INTERFACE LOGIC INCLUDES A MASTER MODE REGISTER 
4805 



SET A MASTER MODE BIT IN THE MASTER MODE REGISTER(S) TO 
ESTABLISH SECURE TRANSMISSION CHANNEL BETWEEN THE MASTER 
MODE LOGIC AND THE DATA INPUT DEVICE OUTSIDE THE OPERATING 
SYSTEM OF THE COMPUTER SYSTEM 4810 



THE MASTER MODE LOGIC AND THE DATA INPUT DEVICE EXCHANGE DATA 
OUTSIDE THE OPERATING SYSTEM OF THE COMPUTER SYSTEM THROUGH 
THE BUS INTERFACE LOGIC(S) THAT INCLUDE THE MASTER MODE 
REGISTER 4815 
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THE MASTER MODE LOGIC FLUSHES THE BUFFERS OF THE BUS INTERFACE 
LOGIC(S) THAT INCLUDE THE MASTER MODE REGISTER AFTER 
CONCLUDING THE DATA TRANSMISSIONS 4820 

1 

THE MASTER MODE LOGIC SIGNALS THE BUS INTERFACE LOGIC(S) TO 
UNSET THE MASER MODE BITS AFTER FLUSHING THE BUFFERS OF THE 
BUS INTERFACE LOGIC(S) THAT INCLUDE THE MASTER MODE REGISTER 
4825 
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4920 



ACCESSING THE SECURITY HARDWARE 4930 



REQUEST AUTHENTICATION FROM THE CRYPTO-PROCESSOR USING 
MASTER MODE 4935A 
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PLACE BUS INTERFACE LOGICS IN MASTER MODE 4938 
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AUTHENTICATE A DEVICE, A COMPUTER SUBSYSTEM, OR A COMPUTER 
SYSTEM TO A COMPUTER SUBSYSTEM, A COMPUTER SYSTEM, OR A 
NETWORK SECURITY SYSTEM 5105 




SET A STARTING VALUE ON A TIMER IN RESPONSE TO SUCCESSFULLY 
AUTHENTICATING 5110 



I 



UPDATE THE TIMER IN A PERIODIC FASHION 5115 
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OR THE COMPUTER SYSTEM 
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